ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 46KB
Sample261110-ph79lsfc65
SHA256 ee7e8891d4f1b7ba2f3df2bce206f7b5e677c75207ab27f8d16f287f6a9e4eec
MD5 28b179e9c28c7c464ef6fbc2659c3ca3
SHA1 c0fdb64607c7c1bec375690ad1f5696a44edf801
SHA512 af48f8d398066231b92e6904758f4ba515fbf70a8d9c245d2abc5754625f3e82cffec82017e0eda27b120939b5ca842ef2792be3f51681773d4736f5de4636ce
SSDEEP 768:jPWHz/xXiK8FZFUvGgmykSke7l5oUinW0R/Q0olukrBrUZRBxbJXLIQmOK4ROE:7El0h40uTE
TLSH
T12B23D673658C603A322B8353A4E0B7ADF969C502CB334959F5BC77AA8FE7D425933214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4804	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{2B9D44BE-2DEC-466E-9E21-6D0A4FADE1EF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe
2532	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 1652	2532	msedge.exe	85
PID 2532 wrote to memory of 4804	2532	msedge.exe	86
PID 2532 wrote to memory of 4748	2532	msedge.exe	87
PID 2532 wrote to memory of 4748	2532	msedge.exe	87
PID 2532 wrote to memory of 4748	2532	msedge.exe	87
PID 2532 wrote to memory of 4116	2532	msedge.exe	89
PID 2532 wrote to memory of 4116	2532	msedge.exe	89
PID 2532 wrote to memory of 2028	2532	msedge.exe	90
PID 2532 wrote to memory of 2028	2532	msedge.exe	90
PID 2532 wrote to memory of 2028	2532	msedge.exe	90
PID 2532 wrote to memory of 1452	2532	msedge.exe	91
PID 2532 wrote to memory of 1452	2532	msedge.exe	91
PID 2532 wrote to memory of 1452	2532	msedge.exe	91
PID 2532 wrote to memory of 4708	2532	msedge.exe	92
PID 2532 wrote to memory of 4708	2532	msedge.exe	92
PID 2532 wrote to memory of 4708	2532	msedge.exe	92
PID 2532 wrote to memory of 4476	2532	msedge.exe	93
PID 2532 wrote to memory of 4476	2532	msedge.exe	93
PID 2532 wrote to memory of 4476	2532	msedge.exe	93
PID 2532 wrote to memory of 3324	2532	msedge.exe	97
PID 2532 wrote to memory of 3324	2532	msedge.exe	97
PID 2532 wrote to memory of 2416	2532	msedge.exe	98
PID 2532 wrote to memory of 2416	2532	msedge.exe	98
PID 2532 wrote to memory of 4820	2532	msedge.exe	100
PID 2532 wrote to memory of 3600	2532	msedge.exe	109
PID 2532 wrote to memory of 3516	2532	msedge.exe	110
PID 2532 wrote to memory of 5044	2532	msedge.exe	111
PID 2532 wrote to memory of 1716	2532	msedge.exe	113
PID 2532 wrote to memory of 1716	2532	msedge.exe	113
PID 2532 wrote to memory of 4660	2532	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffc788c188,0x7fffc788c194,0x7fffc788c1a0
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,4095810467389078817,5854854302554427709,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,10639745421868771581,11777938783669033945,262144 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,7688121932025353229,11982035892593947241,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,5108992386634998947,996105459203068760,2097152 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,13582715498210049966,6509892291438848835,2097152 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,16329539792951359892,10231616789128785613,2097152 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,14603515969066723353,3000197069349800498,2097152 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,7381215576322187092,972559079826996425,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,9773107305880396372,8865188682547910228,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,17268243502100291309,10449396047363464569,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,17268243502100291309,10449396047363464569,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,6556519531941686854,7958376772168507921,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,211005845735421334,13351192420033451697,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,3437799353034258296,6658326043940986632,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,12770462299537822746,17368493680937958684,524288 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,8272748756512228530,8684064007904195419,262144 --field-trial-handle=2324,i,6084205565545103792,9577916236024232362,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0de23955-c6e6-4e78-8478-e2ce37116879.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0de23955-c6e6-4e78-8478-e2ce37116879.tmp
Size 8KB
SHA256 6ae95f7ad5e2d608a0bd2b5968cde8492889c0b5fec69902a535dd38310ddef7
MD5 b62badbd21e0246406d9eaeca64bdeff
SHA1 b1f8a3e579b39562557b2f3aebaecb7e54a01b46
SHA512 ba1ab5f3fb8bd07ec117665ad9aee56f05d38a7f27648ef699173c09d0023d102d8558780efe7aa6476e962e3c4cbee5be86303a8ad8445b2bf5ab085f0b8183
SSDEEP 192:aONQ6IE7QmiUy05TPuIGmApjzor2Ro0nC7sAqU6:aONQ6DtvPuIGmAl8HsDU6
TLSH
T1F702EA35EC78BC6B9FF3AD48F4872A139EA5113BD6952F44DAE85B1C00D724C1306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21aeb8c0-e258-4c4d-b222-12393cc23bfb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\21aeb8c0-e258-4c4d-b222-12393cc23bfb.tmp
Size 18KB
SHA256 84aaf6ce6e16e8b7050f2cd748cf097d2531e1e36b3f16957f09065829f1fa26
MD5 7864cc35d51ac27445c101390b82d08c
SHA1 8aa3013ba49cf90552ceca81b9ba14aa1b2464cb
SHA512 3ae1757c57bb504eed91f9239802841157c1f4335e03c7c85bcbd7b3234145899fb0654a3358310334afd4d5fbd00b977fea9419c7dea6008928f5b25c35cf4f
SSDEEP 384:DQkUSv0sN0UE4OST1dyhzIGmAl89IXviCvaTZclIIld:t0fGOt7CoviCvaTZclL3
TLSH
T14D827D32A878BC2B5FE3E554F54B3A13EEB48127C6C41F54E5DDAB2C01DE298230A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

337bcbf9-b82b-4cc4-a528-8eaf259e28dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\337bcbf9-b82b-4cc4-a528-8eaf259e28dc.tmp
Size 8KB
SHA256 eb55fb5828e4dc04ceafb0dff5ebf052230c85515c20eb301170062e1478592a
MD5 6c633670912392044a8643e91dd447f8
SHA1 b8d6d0760c90ecfbd504e77540c7edac43547f85
SHA512 41afa1ee281ed356f0d1383a4908e7aac743b2836caba94aa6c107eefc467cafe5ca33428f059ec55051411521abbe429b529bdc8b871292de2f7bbe2264474c
SSDEEP 192:rONm6IExQmiUyF5TTuIGmApjzor2Ro0eIXXE27HrrqRU6:rONm6DPETuIGmAl89IXtHCU6
TLSH
T141121936ACB8BC6B6EE3A944F48739239EB54127D789AF50D6DC2B1C00DF25C530A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

433c0450-e6e6-4f07-afb6-837725e16617.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\433c0450-e6e6-4f07-afb6-837725e16617.tmp
Size 18KB
SHA256 4575807ebd8c2a398c0ba6d668dccd9d942f771e6843e16143bd56c858a7f476
MD5 1a59665da118adfb5d505530e9438968
SHA1 e2086f342160ff8cf8f77a4ff19e37769bb12996
SHA512 d03c328775533519eb5194849b97081f04caee8d3feea7808a37ab1588e99de7f63f79b3507d514db8e278d4fae6b5d23d60d97388a61b92ddeadce71e9893b3
SSDEEP 384:YQkUSv0sN0Uv4OST1dyhzIGmAl89IXviCvaTZclIIld:Q08GOt7CoviCvaTZclL3
TLSH
T18C828D32AC78BC2B5FE3E554F44B3A13DEB48127C6C41F54E5DDAB2C01DE298231A91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26f4f984-fa20-4c69-82ea-a183adf264ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\26f4f984-fa20-4c69-82ea-a183adf264ca.tmp
Size 105KB
SHA256 07dd4a5258d4750697d063ae28d82306eba72b6cb522f3682782794ff330068b
MD5 cf0f3bf021f6d74218dd752d78f55e99
SHA1 ac162684ff545c4adf4872fbbcd5ccc9e2443019
SHA512 ea6e84891990f7c0fc7fa388c432f2f2b6783ccbb3036d94630fed49a1b8a100fc5d55bad4ff9424b082b87f4c43b1e1c3b3e3f9ef3a342cdb3b379043988bc2
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7v:fwUQC5VwBIiElEd2K57P7v
TLSH
T151B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

1953c459-07fb-4729-919f-56ed33c2b332.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1953c459-07fb-4729-919f-56ed33c2b332.tmp
Size 10KB
SHA256 a9200a0bd90d855a7442666660c0e7872955882a1b6a2ca1e3ad2629241812da
MD5 8b985656f7ae3af270788c6d74f7b2c9
SHA1 8f4e5942ca8be1c6b94afd03e1d9acd40c636be9
SHA512 99260d5a9ffecf8721f38d3d30a78bb83b3019543d4909387684c6886ad4277385e5cbc072242fb0a066902f7f4f9b6c3a34db426734537fc100354e41baac7a
SSDEEP 192:sxZBRzWm/fEsim6IdpHRHW6+WNGYapAFi+lIg5JJ:sxZBIm/fEsiSxHbG/uB
TLSH
T10622C8126E38B97B9CC7D20DBE55BF13D6F9503291901E48A6FC961C04E77DE224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d401cb2-a3bc-463e-94dd-86e76108639c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d401cb2-a3bc-463e-94dd-86e76108639c.tmp
Size 27KB
SHA256 48889a0482a410be1f4fb584e32abff785afc4aab4a9d76f054cd87602d985d2
MD5 6bcfc7454ae6655cf5d9cdef4465e19b
SHA1 52c1318515ccd50c255446c882d825f1541f7fde
SHA512 a00c3bc0e906a5d4af08f393c792c36e371ed56eaa4134ee3f54dea9e8331338d3f5b24a92420a716ba0b7707af42a8b53499574740e919f7c0b804c044668ef
SSDEEP 768:pHWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy76ro4DfeSmRI:pHWPcLKWvKeEeu1jaClLiF7x4DWSmRI
TLSH
T158C2FA3B640CCB7E5FC01E9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50566f54-b3e4-4758-af8d-a59226ce4f5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50566f54-b3e4-4758-af8d-a59226ce4f5f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 e3996590cc370a5ae18c566578826fd5055f1a4bdf64db83c9b171818522f0b6
MD5 f55f642a14db8d8a9993b2fc0f1d1434
SHA1 1c19f98bfb45a6b910728cd00d0d819cc5a53200
SHA512 6787909b91823f3816bdb5437063548c64de8b938af7ae6c0bb0a223ebd620ffc65c428f7e4c334e91742bca7d526f3743a2731141f2cb9ac238292404883c58
TLSH
T163512DE1D5844AA3FBA89A3382F607B7363755A2A6CF5F5E21ACF4B9480F724500318C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01e57e7afc426ec8661182aaa523a8b31dc508205c7a2dd8b2776cc9c18c853b
MD5 9bb495b5a318b34e1936034616bb80ff
SHA1 bbf4d766f64ebba4d30caf87d1fafbdf8def7a6a
SHA512 da1632d4c6e3fcafdf81fb70afb2f83c54080bcf005c6c2ab8b8dc895d7a2b3794399990a9c63f790666b9a8c7d8c39e06dccf21fdf97ed965fc83014f416c1f
TLSH
T174512DE1D5C45AA3FB985A3382F607B7363695A2A6CF5F5E20ACF4B9480F724500318C
MD5 SHA1 SHA512 TLSH

Submit Download

b369fe4d-52dc-4ab9-b01d-56a52dcf751a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b369fe4d-52dc-4ab9-b01d-56a52dcf751a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2f54d37f-9075-4e62-a1e0-ae4921c112ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2f54d37f-9075-4e62-a1e0-ae4921c112ff.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a4ca937c-d272-4498-981f-38f02be08976.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a4ca937c-d272-4498-981f-38f02be08976.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b178607c-c9da-4782-8d31-d72014afb5f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b178607c-c9da-4782-8d31-d72014afb5f0.tmp
Size 1KB
SHA256 a3de374b8d0c954f2fb411e82ea4ce11b3ae1614e0dbf20c3f932c88bbe42512
MD5 707574b1360c33c05e8db98cc8ba6731
SHA1 d6a7a9ee2e146456e53145f191deb6e6ef851c6c
SHA512 78a5dbe9d73f1bda4cd8d7d1a84249630eedfe693b6b6aeb70c583a79b821bc5fdd55c661a355d942941f00a46687f39bb40d20f7bcf3133627b61de350a68f7
TLSH
T113219EF783E5866E8A0156F05A14AE2BDE1D0516432C7C5589E4FF2BA3F3075E00169F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4498dc4685b18563cc927eec1d436e11c7cb7554798ac5199302eda5214c7c65
MD5 151db82dae6052177c5e4e7c2fe5c47a
SHA1 f5c47ac9aa959976837001a192bab7083e03caa5
SHA512 a1db5aa7ae4844aadb8dd10962d2feffa731e19b2ae7c67578423ae5a2d60e15d2aed1eb4c91e80d01d9ced6b635c3dba75728d5c1e9683c4e8f5d8eaf9aaaec
SSDEEP 192:sxZBRzWm/fEs1m6IdpdRHW6+WNGYaplGV+lIgrJ:sxZBIm/fEs1S3HbGau9
TLSH
T1CC22A6126E28B97B8CC7D20DBE65BF53D6F9503291D41E48AAFC961C04E76DE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cafa44757e1a4ba0f3ae874046156e7ebb934b45d5f0326a60a34047f05b32e5
MD5 a56d88a31b7583bcb1fcebd7d1387162
SHA1 bf798e0889011d4f8e3a1e0a7311b29c7536bcb1
SHA512 1c8b2f3ebbe5572b0dfe3e556969f7d5fdf0cf59ec2f8e6096a2e1fe760b1a2ff207daf19659ad72662f1874ad79e3a55010dde4a6f80b64e617912a26ec975a
SSDEEP 96:KI9KK+wKODKKgITZK1ZrTTOJDMVr5OKD7r3Ofh5knJPT:4pdyZK1ZrTTwDMJ5Z7r3ch5knJPT
TLSH
T158919055707B136139FE288D41B886AA424230B33329E56B7BBC44F68F2BE254DFD4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de6b6cae-0f6b-4494-a6ec-871d2d154b98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de6b6cae-0f6b-4494-a6ec-871d2d154b98.tmp
Size 10KB
SHA256 7529d89bd68f580bb634092b98df65f9f7b52305bd2fa4485966a3ccd9bdf624
MD5 b703632dae0da1e210a3b09bb94f28f1
SHA1 c32b0c18a194d20145df669fe4523619c81df6fd
SHA512 c7e684280e7ce96f7d564aae3d1856a2e07360c0d2509b486bdf0c85ad9ad0a93719fbb10be0a2e982146203dc8ea2af9677553ec891c0557cfccbf9985cd510
SSDEEP 192:sxZBRzWm/fEsim6IdpdRHW6+WNGYapcSV+lIg5JJ:sxZBIm/fEsiS3HbG9uB
TLSH
T1AF22C7126E28B97B9CC7E20DBE15BF13E6F9503291901E48A6FC961C04E77DE224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f39b43f7-23fd-4163-81e7-73a8b9c5814c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f39b43f7-23fd-4163-81e7-73a8b9c5814c.tmp
Size 10KB
SHA256 d1dbd53f1653a0298cc631fed6266e30bb3a83606c36257bd41e57ced7990abb
MD5 a064cb82eaeac0f5638b08b8a9539bd1
SHA1 585bb92031142e9754808bb06217645932d32048
SHA512 2dae6fb0aad6d0d3be62e6f82ee3e2325621fb34c5de792cfcda78a8d7be81ab04a776817f091feccd1d23ba8b932be6f83b30b8a2e215ba269eae88880f6086
SSDEEP 192:sxZBRzWm/fEsMm6IdpdRHW6+WNGYaplGV+lIg5rJ:sxZBIm/fEsMS3HbGau/
TLSH
T1E322A5126E28B97B8CC6D20DBE65BF53D6F9503291941E48AAFC961C04E76DE224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bcc74b8-abce-476f-8566-36ae64d9dea8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4bcc74b8-abce-476f-8566-36ae64d9dea8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7e97f90d88f4813e5d3b0a001f0df678195ddd9f72977de18cbf543821504c3b
MD5 21d63c8706a8899b78d36d748c95876a
SHA1 fcfb0c1e2f6e231889823450334ad20018b6e8fb
SHA512 8f1ab611053402879c7edacc6c449b27645eb8803d3f3a8aad5c3523397e2cc481a71056fe87b286d1d3e719a8c580342a3bd45809f64e5c38cde8784b7bfc76
SSDEEP 384:9iFzQkUSvbzsN18TUNTUlIlE4OST1dyhzIGmAl89IXcBiCvaTZclIIld:0FdPswgwGOt7CocBiCvaTZclL3
TLSH
T1BDA26D339CA8EC3BAFA3DA44F54E3613DEB48167C6C4AB54E6C9AA1C01DE19C134BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed53b778-60f4-42b0-b841-21bdbcbefbb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ed53b778-60f4-42b0-b841-21bdbcbefbb2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 16c74b4e47333f849719f14f969170d35c76a3eca3f35123f315ee4f2eebc4e1
MD5 44bfe26b882a101196357d1c82688202
SHA1 1900f3b2e70ba17321615a9ee7c0869e91371a21
SHA512 86dfc7e099ecdc54200e97456a6c17e49a19df667e56337b653e47a2f5445e79450a179885da94e1dc5386927da02cba46b5ea7432ec4be4caa017154471513d
TLSH
T1D7413A58BAF91148B3B76E5AAFF6A86E487EB9372E0AC45D10110D4F0563B40CD71733
MD5 SHA1 SHA512 TLSH

Submit Download